Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 8 of 163.
- CVE-2018-8932 Missing authorization in n/a
- CVE-2018-8931 Missing authorization in n/a
- CVE-2018-8930 Security feature bypass in n/a
- CVE-2018-8929 Security feature bypass in SSL VPN Client
- CVE-2018-8928 Cross-site scripting in CardDAV Server
- CVE-2018-8927 Missing authorization in Calendar
- CVE-2018-8926 Privilege escalation in Photo Station
- CVE-2018-8925 Cross-site request forgery in Photo Station
- CVE-2018-8924 Cross-site scripting in Office
- CVE-2018-8923 Cross-site scripting in File Station
- CVE-2018-8922 Missing authorization in Drive
- CVE-2018-8921 Cross-site scripting in Drive
- CVE-2018-8920 Code injection in DiskStation Manager (DSM)
- CVE-2018-8919 Information disclosure in DiskStation Manager (DSM)
- CVE-2018-8918 Cross-site scripting in Synology Router Manager (SRM)
- CVE-2018-8917 Cross-site scripting in DiskStation Manager (DSM)
- CVE-2018-8916 Auth bypass in DiskStation Manager (DSM)
- CVE-2018-8915 Cross-site scripting in Calendar
- CVE-2018-8914 SQL injection in Media Server
- CVE-2018-8913 Open redirect in Web Station
- CVE-2018-8912 Cross-site scripting in Note Station
- CVE-2018-8911 Cross-site scripting in Note Station
- CVE-2018-8910 Cross-site scripting in Drive
- CVE-2018-8909 Path traversal in n/a
- CVE-2018-8908 Cross-site request forgery in n/a
- CVE-2018-8906 Cross-site scripting in n/a
- CVE-2018-8905 Memory corruption in n/a
- CVE-2018-8904 Denial of service in n/a
- CVE-2018-8903 Cross-site scripting in n/a
- CVE-2018-8902 Hardcoded credentials in n/a
- CVE-2018-8901 Information disclosure in n/a
- CVE-2018-8900 Cross-site scripting in n/a
- CVE-2018-8899 Cross-site scripting in n/a
- CVE-2018-8898 Auth bypass in n/a
- CVE-2018-8897 Race condition in n/a
- CVE-2018-8896 Denial of service in n/a
- CVE-2018-8895 Denial of service in n/a
- CVE-2018-8894 Denial of service in n/a
- CVE-2018-8893 Cross-site request forgery in n/a
- CVE-2018-8892 Cross-site request forgery in BlackBerry UEM
- CVE-2018-8891 Cross-site scripting in BlackBerry UEM
- CVE-2018-8890 Information disclosure in UEM
- CVE-2018-8889 Path traversal in BlackBerry Enterprise Mobility Server (BEMS)
- CVE-2018-8888 Cross-site scripting in BlackBerry UEM
- CVE-2018-8885 Race condition in n/a
- CVE-2018-8883 Memory corruption in n/a
- CVE-2018-8882 Memory corruption in n/a
- CVE-2018-8881 Memory corruption in n/a
- CVE-2018-8880 Information disclosure in n/a
- CVE-2018-8879 Memory corruption in n/a
- CVE-2018-8878 Information disclosure in n/a
- CVE-2018-8877 Information disclosure in n/a
- CVE-2018-8876 Denial of service in n/a
- CVE-2018-8875 Denial of service in n/a
- CVE-2018-8874 Denial of service in n/a
- CVE-2018-8873 Denial of service in n/a
- CVE-2018-8872 Memory corruption in Triconex Tricon
- CVE-2018-8871 Memory corruption in Automation TPEditor
- CVE-2018-8870 Medtronic MyCareLink Patient Monitor Use of Hard-coded Password
- CVE-2018-8869 Other in IDS 2102
- CVE-2018-8868 Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function
- CVE-2018-8867 Denial of service in GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RXi all versions
- CVE-2018-8866 Command injection in VGo Robot
- CVE-2018-8865 Memory corruption in IDS 2102
- CVE-2018-8864 Weak cryptography in ATI Emergency Mass Notification Systems
- CVE-2018-8863 Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2018-8862 Auth bypass in Emergency Mass Notification Systems
- CVE-2018-8861 Privilege escalation in Brilliance CT Scanners
- CVE-2018-8860 Information disclosure in VGo Robot
- CVE-2018-8859 Auth bypass in SmartServer 1
- CVE-2018-8858 Hardcoded credentials in VGo Robot
- CVE-2018-8857 Hardcoded credentials in Brilliance CT Scanners
- CVE-2018-8856 Hardcoded credentials in e-Alert Unit (non-medical device)
- CVE-2018-8855 Misconfiguration in SmartServer 1
- CVE-2018-8854 Denial of service in e-Alert Unit (non-medical device)
- CVE-2018-8853 Privilege escalation in Brilliance CT Scanners
- CVE-2018-8852 Auth bypass in e-Alert Unit (non-medical device)
- CVE-2018-8851 Hardcoded credentials in SmartServer 1
- CVE-2018-8850 Code injection in e-Alert Unit (non-medical device)
- CVE-2018-8849 Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data
- CVE-2018-8848 Misconfiguration in e-Alert Unit (non-medical device)
- CVE-2018-8847 Memory corruption in Eaton 9000X Drive
- CVE-2018-8846 Cross-site scripting in e-Alert Unit (non-medical device)
- CVE-2018-8845 Memory corruption in WebAccess
- CVE-2018-8844 Cross-site request forgery in e-Alert Unit (non-medical device)
- CVE-2018-8843 Use after free in Rockwell Automation Arena
- CVE-2018-8842 Information disclosure in e-Alert Unit (non-medical device)
- CVE-2018-8841 Privilege escalation in WebAccess
- CVE-2018-8840 Memory corruption in Schneider Electric InduSoft Web Studio and InTouch Machine Edition
- CVE-2018-8839 Memory corruption in PMSoft
- CVE-2018-8838 Missing authorization in Yokogawa CENTUM and Exaopc
- CVE-2018-8837 Memory corruption in Advantech WebAccess HMI Designer
- CVE-2018-8836 Denial of service in WAGO 750 Series
- CVE-2018-8835 Use after free in Advantech WebAccess HMI Designer
- CVE-2018-8834 Memory corruption in Omron CX-One
- CVE-2018-8833 Memory corruption in Advantech WebAccess HMI Designer
- CVE-2018-8832 Cross-site scripting in n/a
- CVE-2018-8831 Cross-site scripting in n/a
- CVE-2018-8828 Memory corruption in n/a
- CVE-2018-8827 Cross-site scripting in n/a